Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 421 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

About log message.

wutthichai K.
Dear All,
I'd like someone to explain me about this log message. What is happen on my network?

Sep  1 23:15:46 (none) kernel: IP-SPOOFING Drop: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:1c:10:5c:62:08:00 SRC=172.16.29.92 DST=255.255.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=56875 PROTO=UDP SPT=1027 DPT=137 LEN=58

Sep  1 22:46:01 (none) kernel: HTB: quantum of class 10010 is small. Consider r2q change.ɞ>UDP Drop: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:1c:10:5c:62:08:00 SRC=203.150.202.199 DST=203.150.202.223 LEN=202 TOS=0x00 PREC=0x00 TTL=128 ID=50539 PROTO=UDP SPT=138 DPT=138 LEN=182 

Best Regards,
Wutthichai K. [:S]  


This thread was automatically locked due to age.
Parents
  • 0
    First message is PORTSPOOFING. Something is wrong with your network. Maybe you connected 2 NICs on the same hub. NIC one is seeing IPs from NIC two -> SPOOFING.

    Second message has something to do with QoS. What are your QoS-Settings?

    Cheers
    Xeno  
Reply
  • 0
    First message is PORTSPOOFING. Something is wrong with your network. Maybe you connected 2 NICs on the same hub. NIC one is seeing IPs from NIC two -> SPOOFING.

    Second message has something to do with QoS. What are your QoS-Settings?

    Cheers
    Xeno  
Children
No Data